The CVV is the three-digit number on the back of your card

The CVV (Card Verification Value) is a three-digit security code printed on your credit card. On most cards, it sits on the back in the signature strip area — usually to the right of the cardholder's signature line. On American Express cards, the CVV is a four-digit code printed on the front, above the card number on the right side.

This number exists to verify that you physically have the card when you make an online or phone purchase. A merchant or payment processor asks for it to confirm the card is real and in your possession. The CVV is never stored after a transaction, which is why you need to enter it each time — unlike your card number, which payment systems may keep on file.

The CVV is different from your PIN (Personal Identification Number), which you use at ATMs and in-store chip readers. You should never share your CVV with anyone except the merchant you are paying directly, and you should never write it down or store it anywhere.

Key Takeaways

  • The CVV is a three-digit code on the back of most credit cards, located in the signature strip area to the right of where you sign.
  • American Express cards have a four-digit CVV printed on the front of the card, above the card number on the right side.
  • You enter the CVV during online checkout or over the phone to prove you have the physical card in your possession.
  • Never share your CVV with anyone except the merchant you are paying, and do not store it in writing or digitally.

Why merchants ask for the CVV

When you shop online or by phone, the merchant cannot see your card in person. The CVV is a way to confirm that you actually have the card — not just the card number, which could be stolen or guessed. If someone has only your card number and expiration date, they cannot complete most online purchases without the CVV.

The CVV is generated using a formula that only the card issuer knows. Merchants cannot create a valid CVV; they can only check whether the one you provide matches the card issuer's records. This check happens in seconds during checkout, and the transaction is declined if the CVV does not match.

Where the CVV appears on different card types

Most Visa, Mastercard, and Discover cards print the CVV on the back. Look in the signature strip — the white or gray area where you sign your name. The three-digit code usually appears to the right of the signature line, sometimes with the full card number printed above it. On some cards, the CVV is the last three digits of a longer number printed in that area.

American Express cards are different. The CVV is four digits and appears on the front of the card, above the card number on the right side. It is printed in a smaller font than the card number itself. If you have an older American Express card, the CVV may be in a slightly different position, but it will still be on the front.

Debit cards follow the same rules as their credit card counterparts. If your debit card is branded as Visa or Mastercard, the CVV is on the back. If it is an American Express debit card, the CVV is on the front.

What to do if you cannot find your CVV

If your card is damaged, worn, or faded and you cannot read the CVV, contact your card issuer directly. Call the number on the back of your card or log into your online account. The issuer can read the CVV to you over the phone so you can complete your purchase. Do not give the CVV to anyone except the merchant you are paying.

If you have lost your card entirely, you cannot use the CVV because you do not have the card. Contact your issuer to report it lost or stolen. They will cancel the card and send you a replacement with a new CVV. Until the new card arrives, you can ask the issuer whether they offer a temporary card number or digital wallet option for online shopping.

CVV and card security

The CVV is one layer of fraud protection, but it is not foolproof. If someone has your card number, expiration date, and CVV, they can make online purchases. This is why you should never share your CVV in an email, text, or chat, and never enter it on a website unless you initiated the transaction and the site is secure (look for "https://" in the address bar).

Legitimate merchants will never ask for your CVV via email or phone unless you called them first. If someone contacts you asking for your CVV, it is a scam. Hang up or delete the message and contact your card issuer directly using the number on your card.

Your card issuer does not store the CVV after a transaction. This means that even if a merchant's database is hacked, the CVV cannot be stolen from their records — it was never saved there. The card number and expiration date are at higher risk in a data breach, which is why you should monitor your statements regularly and report any charges you do not recognize.

CVV versus other card security features

The CVV is one of several security measures on your card. Your card number itself is a 15- or 16-digit identifier unique to your account. Your expiration date tells merchants when the card is no longer valid. Your name appears on the front so merchants can check it against your ID in person.

Newer cards also have a chip (an embedded microchip) that creates a unique code for each in-person transaction, making it harder to clone your card. Some cards offer virtual card numbers through their issuer's app or website — a temporary number you can use for online shopping instead of your real card number. These features work alongside the CVV to reduce fraud.

Frequently Asked Questions

Is the CVV the same as the security code?

Yes. CVV, CVC (Card Verification Code), and security code are different names for the same thing. Visa calls it CVV, Mastercard calls it CVC, and Discover calls it CID (Card Identification). They all serve the same purpose: verifying you have the physical card.

Can I use my card online without entering the CVV?

Most online merchants require the CVV before they will process your payment. Some merchants who have your card on file from a previous purchase may not ask for it again. If a site does not ask for the CVV, it may be storing your card information — check the site's privacy policy to understand how your data is handled.

What happens if I enter the wrong CVV?

The transaction will be declined. You will usually get an error message saying the CVV does not match. You can try again with the correct number. Multiple failed attempts may trigger a fraud alert on your account, so double-check the number before you submit it.

Should I memorize my CVV or write it down?

You should memorize it if you use the same card frequently. Do not write it down, store it in your phone, or save it in an email or document. The whole point of the CVV is that you need the physical card to use it — keeping it separate from the card defeats that protection.

Can someone use my card number without the CVV?

In person, yes — a cashier will not ask for the CVV. Online or by phone, most merchants will decline the transaction without it. Some older or less secure websites may accept a card number without the CVV, which is why you should shop on secure sites and monitor your statements for unauthorized charges.